GE
Vendor
geoserver
24
CVEs
2
On KEV
0
New 30D
Products
GE9.8
geoserver
geoserver
17 CVEs2 on KEV0 new
GE8.8
Geowebcache
Geoserver
2 CVEs0 on KEV0 new
OR8.2
org.geoserver.web:gs-web-app
geoserver
2 CVEs0 on KEV0 new
OR7.2
org.geoserver.extension:gs-db2
geoserver
1 CVEs0 on KEV0 new
OR8.2
org.geoserver:gs-main
geoserver
1 CVEs0 on KEV0 new
OR7.2
org.geoserver.web:gs-web-sec-core
geoserver
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-58175 | OR org.geoserver:gs-main geoserver | 8.2 | Jun 18 | GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution |
| CVE-2025-52465 | OR org.geoserver.web:gs-web-app geoserver | 7.2 | Jun 18 | GeoServer has an arbitrary file write vulnerability in its Master Password Dump Page |
| CVE-2025-27511 | OR org.geoserver.extension:gs-db2 geoserver | 7.2 | Jun 18 | GeoServer DB2 DataStore Extension has a JNDI Vulnerability via Store Connection |
| CVE-2025-21621 | GE Geoserver Geoserver | 6.1 | Nov 25 | GeoServer is an open source server that allows users to share and edit geospatial data |
| CVE-2025-58360 In wildKEV | GE geoserver geoserver | 9.8 | Nov 25 | GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature |
| CVE-2024-36401 In wildKEV | GE geoserver geoserver | 9.8 | Jul 1 | Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver |
| CVE-2024-34696 | GE Geoserver Geoserver | 4.9 | Jul 1 | GeoServer is an open source server that allows users to share and edit geospatial data |
| CVE-2024-24749 | GE Geoserver Geoserver | 7.5 | Jul 1 | GeoServer is an open source server that allows users to share and edit geospatial data |
| CVE-2024-23821 | GE Geoserver Geoserver | 4.8 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data |
| CVE-2024-23819 | GE Geoserver Geoserver | 4.8 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data |
| CVE-2024-23818 | GE Geoserver Geoserver | 4.8 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data |
| CVE-2024-23643 | GE Geoserver Geoserver | 4.8 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data |
| CVE-2024-23642 | GE Geoserver Geoserver | 4.8 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data |
| CVE-2024-23640 | GE Geoserver Geoserver | 4.8 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data |
| CVE-2024-23634 | GE Geoserver Geoserver | 6.0 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data |
| CVE-2023-51445 | GE Geoserver Geoserver | 4.8 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data |
| CVE-2023-51444 | GE Geoserver Geoserver | 7.2 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data |
| CVE-2023-41877 | GE Geoserver Geoserver | 7.2 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data |
| CVE-2023-5786 | GE Geowebcache Geoserver | 8.8 | Oct 26 | A vulnerability was found in GeoServer GeoWebCache up to 1.15.1 |
| CVE-2023-35042 | GE Geoserver Geoserver | 9.8 | Jun 12 | GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request, as… |
| CVE-2022-24846 | GE Geowebcache Geoserver | 7.2 | Apr 14 | GeoWebCache is a tile caching server implemented in Java |
| CVE-2008-7227 | GE Geoserver Geoserver | – | Sep 14 | PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting… |
